General
- Target 2026-08-12_50efdbae27d2831c9a49207cecc4b889_amadey_darkgate_elex_smoke-loader_stop
- Size 1.9MB
- Sample260813-bka51axta1
- SHA256 ed915ed3f485d91d34e6293ef772101b2eae3d47ac22f461b3ecd08d6650a760
- MD5 50efdbae27d2831c9a49207cecc4b889
- SHA1 05e867c5d83915830d427e241ba79a8fbd91abdc
- SHA512 b40e5e06cf524560f0955b979d466b8dc5263002d33ae166339a0e5fe149929fddee310783a46e5e7d08c21fa8b9e77c916cbb9b305e4c493825b571aea3c59e
- SSDEEP 24576:o9euVlZ78zonQ5MWSgouvz0ZRHkFfenxyQZXS7gZnQh2NIq:o8uVAR5SgouvAeFfenxyQZXS7uQ0NIq
- TLSH T1AD954B12B3F94139F1F77F70EAB986602AB6BC609D39C94E52C5225E0D70A50DA31B37
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-12_50efdbae27d2831c9a49207cecc4b889_amadey_darkgate_elex_smoke-loader_stop.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-12_50efdbae27d2831c9a49207cecc4b889_amadey_darkgate_elex_smoke-loader_stop.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-12_50efdbae27d2831c9a49207cecc4b889_amadey_darkgate_elex_smoke-loader_stop
- Size 1.9MB
- SHA256 ed915ed3f485d91d34e6293ef772101b2eae3d47ac22f461b3ecd08d6650a760
- MD5 50efdbae27d2831c9a49207cecc4b889
- SHA1 05e867c5d83915830d427e241ba79a8fbd91abdc
- SHA512 b40e5e06cf524560f0955b979d466b8dc5263002d33ae166339a0e5fe149929fddee310783a46e5e7d08c21fa8b9e77c916cbb9b305e4c493825b571aea3c59e
- SSDEEP 24576:o9euVlZ78zonQ5MWSgouvz0ZRHkFfenxyQZXS7gZnQh2NIq:o8uVAR5SgouvAeFfenxyQZXS7uQ0NIq
- TLSH T1AD954B12B3F94139F1F77F70EAB986602AB6BC609D39C94E52C5225E0D70A50DA31B37
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Checks whether UAC is enabled
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
1Subvert Trust Controls
1Install Root Certificate
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1